CCI-001360
CCI-001360 Definition
The organization monitors privileged role assignments.
| Status | |
| Type | CheckType.policy |
Master Assessment Datasheet
Implementation Guidance
The organization being inspected/assessed implements a process to monitor privileged role assignments. The organization must maintain an audit trail of monitoring.
Validation Procedures
The organization conducting the inspection/assessment obtains and examines the audit trail of monitoring to ensure the organization being inspected/assessed monitors privileged role assignments.
Compelling Evidence
1.) Signed and dated System Security Plan (SSP), referencing section which defines the process for monitoring and reviewing privileged role assignments. 2.) Audit trail of monitoring.